Privacy Policy

Privacy Policy 

Last Updated: 21.07.2025

1. Introduction
SUBLITON LTD, UIC 207728750, with registered office and management address: Bulgaria, Ruse, Lipnik №106 (referred to as "the Administrator," "We," or "Us"), takes the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store, and protect the information you provide when using our website www.subliton.com.

As a data controller, we collect and process information about customers, service users, suppliers, business partners, experts and consultants, website and digital platform visitors, as well as individuals visiting our offices and commercial premises, and participants in training sessions and events. If it becomes necessary to collect additional categories of personal data not explicitly described in this policy, we will notify the relevant individuals in accordance with legal requirements, providing clear information about the type of data, the legal basis for processing, and the purposes of use, as well as obtaining the necessary consent when required by law.

2. Scope of the Policy
This policy applies to all personal data collected through:

• Newsletter subscription form (email address).
• Contact request form (email, phone, name, and other provided details).
• Automated data collection via cookies and tracking technologies.

3. Types of Collected Data

3.1. Data You Provide:

• Email address (required) – used for marketing communications.
• For contact/quote requests:
• Name (optional) – for personalized service.
• Phone number (required) – to respond to inquiries.
• Additional details (if provided) – e.g., address, project description.

3.2. Automatically Collected Data:

• Session cookies – essential for website functionality (e.g., forms).
• Analytics cookies (e.g., Google Analytics) – to measure traffic.
• Marketing cookies – for personalized ads (if consented).

Log data: IP address, browser type, access times.

4. Legal Basis & Purpose of Processing
Your data is processed based on:

• Consent (GDPR Art. 6(1)(a)) – for newsletters/marketing.
• Contractual necessity (GDPR Art. 6(1)(b)) – to respond to inquiries.
• Legitimate interests (GDPR Art. 6(1)(f)) – website security, fraud prevention.

5. Data Sharing
Your data is not shared with third parties, except:

• Hosting provider (SuperHosting.BG) – for website infrastructure.
• Email service providers (e.g., Mailchimp) – for newsletters.
• Legal authorities – if required by law.

These third parties may be located outside the Republic of Bulgaria. Prior to any data transfer, we will take all necessary measures to ensure adequate protection of your personal data in accordance with applicable data protection laws (including GDPR) and SUBLITON's internal policies. Currently, we process personal data exclusively within the Republic of Bulgaria and countries of the European Economic Area (EEA), without any transfers to third countries outside the EEA. For any future transfers outside the EEA, we will implement European Commission adequacy decisions, standard contractual clauses, or other approved international mechanisms. Regardless of whether SUBLITON acts as a data controller, processor, or joint controller, all obligations are governed by written contracts or agreements that comply with the requirements of Article 26 or Article 28 of the GDPR.

5.1. Hosting & Third Parties
Our website uses services from:
"SuperHosting.BG" LTD, UIC 131449987, Address: Sofia, 1797, "Dr. G. M. Dimitrov" Blvd. 36.
Their Privacy Policy is available at:
https://www.superhosting.bg/web-hosting-page-privacy-policy.php

6. Cookies

• Essential cookies – for core functionality.
• Analytical cookies – for performance tracking.
• Marketing cookies – only with consent.

You can manage preferences via browser settings.

7. Your Rights (GDPR)
You have the right to:

• Access, correct, or delete your data.
• Restrict processing or request data portability.
• Object to marketing communications.

To exercise these rights, contact: info@subliton.com

8. Data Retention
Your personal data will be retained only for the period necessary to fulfill the purposes for which it was collected. We have established clear data management policies and procedures that incorporate strict retention criteria and ensure timely deletion upon expiration of defined periods. All data storage and destruction processes are conducted in compliance with applicable legislation and our internal information protection standards.

Newsletter emails – until unsubscribed.

Contact inquiries – from session-based to several years (depending on type).

Cookies – from session-based to several years (depending on type).

9. Security
We implement robust security measures, including organizational, physical and technical safeguards, to ensure comprehensive protection of all processed personal data. Our policies and procedures are specifically designed to maintain data confidentiality, integrity and access control, while taking into account the specific risks associated with the categories of personal data and processing methods involved. All measures comply with applicable legal requirements and industry best practices

We implement technical (encryption, firewalls) and organizational measures to protect your data.

Contact Us
For privacy-related questions, contact:
SUBLITON LTD
UIC: 207728750
Address: Bulgaria, Ruse, Lipnik Blvd. №106
Email: info@subliton.com

Policy Updates
This policy may be updated. Changes will be posted on this page.

This text is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Bulgarian legislation.